Ga naar inhoud

Pc crasht elke 30 minuten + log

Lipton
 Delen

Aanbevolen berichten

Lipton Meewerkend lid

Lipton

Geplaatst:
  • Auteur
Geplaatst:

ComboFix 11-06-17.04 - Bernard 18/06/2011 17:18:04.1.4 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3322.1602 [GMT 2:00]

Gestart vanuit: c:\users\Bernard\Downloads\ComboFix.exe

AV: Lavasoft Ad-Watch Live! Antivirus *Disabled/Updated* {DAAC1C79-1A96-9DFE-FC4C-6940214C33E6}

AV: Norton 360 *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

FW: Norton 360 *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}

SP: Norton 360 *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\install.exe

c:\program files\HyperCam Toolbar\tbHElper.dll

c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf

G:\Autorun.inf

.

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_PremierOpinion

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-05-18 to 2011-06-18 ))))))))))))))))))))))))))))))

.

.

2011-06-18 05:54 . 2011-06-18 05:54 -------- d-----w- c:\users\Bernard\AppData\Local\{0A1F37E9-FA84-4357-8BAB-4C6F632E3D83}

2011-06-17 22:10 . 2011-06-17 22:10 -------- d-----w- c:\program files\CCleaner

2011-06-17 14:38 . 2011-06-17 14:38 -------- d-----w- c:\users\Bernard\AppData\Local\{79DA7609-1A79-4565-8D8F-09A8BBBBCDD9}

2011-06-17 06:38 . 2011-06-17 06:38 388096 ----a-r- c:\users\Bernard\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-06-17 06:38 . 2011-06-17 06:38 -------- d-----w- c:\program files\Trend Micro

2011-06-16 18:33 . 2011-06-16 18:33 -------- d-----w- c:\users\Bernard\AppData\Local\{1FBC229C-8BDE-4FA0-9A79-4EE4926FD3C7}

2011-06-16 06:32 . 2011-06-16 06:32 -------- d-----w- c:\users\Bernard\AppData\Local\{15FD1500-DEAB-4A03-8FAF-089358C31C01}

2011-06-15 16:34 . 2011-06-15 16:34 -------- d-----w- c:\users\Bernard\AppData\Local\{9B598C97-AA91-4C5E-A025-4540388D8CE4}

2011-06-15 04:34 . 2011-06-15 04:34 -------- d-----w- c:\users\Bernard\AppData\Local\{B758367F-EE86-43A9-90B9-E32B130890BC}

2011-06-14 08:59 . 2011-06-14 09:00 -------- d-----w- c:\users\Bernard\AppData\Local\{5D4A9C58-A079-4968-80F9-07F7E85F7F4A}

2011-06-13 18:28 . 2011-06-13 18:28 -------- d-----w- c:\users\Bernard\AppData\Local\{5477B114-3CC5-4D1E-874C-7CCE8E9BE09B}

2011-06-13 06:27 . 2011-06-13 06:27 -------- d-----w- c:\users\Bernard\AppData\Local\{319F23D7-249B-4697-A310-BE9147F52A3F}

2011-06-12 18:08 . 2011-06-12 18:08 -------- d-----w- c:\users\Bernard\AppData\Local\{3FFDB0E1-2857-4F3C-9459-4968AFE53F86}

2011-06-12 06:06 . 2011-06-12 06:07 -------- d-----w- c:\users\Bernard\AppData\Local\{4F5A9195-BA4B-4AD4-B19D-6E061E1B8503}

2011-06-11 17:57 . 2011-06-11 17:57 -------- d-----w- c:\users\Bernard\AppData\Local\{CFAD6FC1-C0FA-498A-B740-EC051650196D}

2011-06-11 05:57 . 2011-06-11 05:57 -------- d-----w- c:\users\Bernard\AppData\Local\{70B8A085-1007-48EB-BA0A-124B00768459}

2011-06-10 10:26 . 2011-06-10 10:26 -------- d-----w- c:\users\Bernard\AppData\Local\{65E97152-8099-4F77-A66A-FCEB80648847}

2011-06-09 18:18 . 2011-06-09 18:18 -------- d-----w- c:\users\Bernard\AppData\Local\{B2AEAAE7-CDD3-4CB0-8B39-1F7AC6855A78}

2011-06-09 13:47 . 2011-06-09 13:50 -------- d-----w- c:\programdata\PopCap Games

2011-06-09 06:17 . 2011-06-09 06:18 -------- d-----w- c:\users\Bernard\AppData\Local\{3DDF283F-8F2B-4CCC-9849-88832BB8FF07}

2011-06-08 09:56 . 2011-06-08 09:56 -------- d-----w- c:\users\Bernard\AppData\Local\{F966610B-B83C-4E87-971E-527EE0FDB723}

2011-06-07 17:37 . 2011-06-07 17:37 -------- d-----w- c:\users\Bernard\AppData\Local\{5A683711-DF73-4CEF-BEE2-06FAB700C751}

2011-06-07 05:26 . 2011-06-07 05:26 -------- d-----w- c:\users\Bernard\AppData\Local\{728CBA4B-ACED-46D0-A18A-F03E91ED1B06}

2011-06-06 09:56 . 2011-06-06 09:56 -------- d-----w- c:\users\Bernard\AppData\Local\{637977D4-BD9D-4FA8-A121-BB7115E21A90}

2011-06-05 17:59 . 2011-06-05 17:59 -------- d-----w- c:\users\Bernard\AppData\Local\{3931201F-EFAB-4187-BFCB-701F66996D64}

2011-06-05 05:59 . 2011-06-05 05:59 -------- d-----w- c:\users\Bernard\AppData\Local\{337B41DD-9B7F-477F-BB45-8FAE145B7A61}

2011-06-04 17:59 . 2011-06-04 17:59 -------- d-----w- c:\program files\Virtual Villagers 4 - The Tree of Life

2011-06-04 17:51 . 2011-06-04 17:53 -------- d-----w- c:\programdata\Big Fish Games

2011-06-04 17:49 . 2011-06-04 17:49 -------- d-----w- c:\users\Bernard\AppData\Local\{130705C3-5891-4B70-B53F-6B6F19778B60}

2011-06-04 17:49 . 2011-06-04 17:53 -------- d-----w- C:\BigFishGamesCache

2011-06-04 05:49 . 2011-06-04 05:49 -------- d-----w- c:\users\Bernard\AppData\Local\{35D8BEEB-54EC-45E3-8D32-38447D237D98}

2011-06-03 10:36 . 2011-06-03 10:36 -------- d-----w- c:\users\Bernard\AppData\Local\{36C95C8B-87BD-4570-A11A-3EB6975F9141}

2011-06-02 18:01 . 2011-06-02 18:01 -------- d-----w- c:\users\Bernard\AppData\Local\{F42FB9E4-EF3E-4012-8D94-D82134FE07C5}

2011-06-02 06:00 . 2011-06-02 06:00 -------- d-----w- c:\users\Bernard\AppData\Local\{620DB62F-924A-4F6D-A254-CB923F197A57}

2011-06-01 18:00 . 2011-06-01 18:00 -------- d-----w- c:\users\Bernard\AppData\Local\{6765CC6C-9A9F-4776-AE8F-29636B1F3AF1}

2011-06-01 06:00 . 2011-06-01 06:00 -------- d-----w- c:\users\Bernard\AppData\Local\{B3423212-DB99-4E9E-BD7F-EC46EB8FBF55}

2011-05-31 17:59 . 2011-05-31 17:59 -------- d-----w- c:\users\Bernard\AppData\Local\{92D080F9-2E59-4F34-985C-30CDDE0E4FA9}

2011-05-31 05:47 . 2011-05-31 05:48 -------- d-----w- c:\users\Bernard\AppData\Local\{DBA5C387-D345-4939-BCE1-211D8B2144ED}

2011-05-30 09:54 . 2011-05-30 09:54 -------- d-----w- c:\users\Bernard\AppData\Local\{F5241C0F-3193-4F54-AE30-4A3D14AD0546}

2011-05-29 18:02 . 2011-05-29 18:02 -------- d-----w- c:\users\Bernard\AppData\Local\{06EAA5C4-BC5F-4312-8E98-499C34F1529D}

2011-05-29 06:01 . 2011-05-29 06:01 -------- d-----w- c:\users\Bernard\AppData\Local\{AA184356-C17E-4F9F-8571-D0409F6411D6}

2011-05-28 18:00 . 2011-05-28 18:00 -------- d-----w- c:\users\Bernard\AppData\Local\{DF2CED84-ED5B-4AAE-A7F5-E5BF0EA35717}

2011-05-28 05:54 . 2011-05-28 05:55 -------- d-----w- c:\users\Bernard\AppData\Local\{B0C66A5A-01EC-40E0-AC29-9B4580EBD5C1}

2011-05-27 21:43 . 2011-05-27 21:43 -------- d-----w- c:\users\UpdatusUser

2011-05-27 21:41 . 2011-05-27 21:41 -------- d-----w- c:\programdata\NVIDIA Corporation

2011-05-27 21:39 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll

2011-05-27 21:39 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll

2011-05-27 21:39 . 2011-04-08 05:14 6299752 ----a-w- c:\windows\system32\nvwgf2um.dll

2011-05-27 21:39 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll

2011-05-27 21:39 . 2011-04-08 05:14 15227496 ----a-w- c:\windows\system32\nvoglv32.dll

2011-05-27 21:39 . 2011-04-08 05:14 10690024 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2011-05-27 21:39 . 2011-04-08 05:14 5180824 ----a-w- c:\windows\system32\nvcuda.dll

2011-05-27 21:39 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll

2011-05-27 21:39 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll

2011-05-27 21:39 . 2011-04-08 05:14 2034280 ----a-w- c:\windows\system32\nvapi.dll

2011-05-27 21:39 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll

2011-05-27 21:39 . 2011-04-08 05:14 10071656 ----a-w- c:\windows\system32\nvd3dum.dll

2011-05-27 21:33 . 2008-10-07 12:33 797216 ----a-w- c:\windows\system32\nvcplui.exe

2011-05-27 21:33 . 2008-10-07 12:33 420384 ----a-w- c:\windows\system32\nvcpl.cpl

2011-05-27 17:16 . 2011-05-27 17:16 -------- d-----w- c:\users\Bernard\AppData\Local\{E774DC6E-360E-4265-A190-9B2BCEC8A678}

2011-05-27 14:26 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-05-27 14:26 . 2011-06-17 15:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2011-05-27 14:26 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-05-27 05:15 . 2011-05-27 05:15 -------- d-----w- c:\users\Bernard\AppData\Local\{529CBAC1-4CDC-4B51-B168-1D3F9C45BFFC}

2011-05-26 17:15 . 2011-05-26 17:15 -------- d-----w- c:\users\Bernard\AppData\Local\{F2CCFF4B-ACAD-43D6-BE3F-B254076AB8FE}

2011-05-26 05:14 . 2011-05-26 05:14 -------- d-----w- c:\users\Bernard\AppData\Local\{CAFD876C-005B-4A4C-A01C-779E5DA8A88F}

2011-05-25 09:40 . 2011-05-25 09:40 -------- d-----w- c:\users\Bernard\AppData\Local\{A0213929-5762-4071-971E-7735B4BB39EE}

2011-05-24 19:59 . 2011-05-24 19:59 -------- d-----w- c:\users\Bernard\AppData\Local\{E35586CB-6E58-4E06-9EA2-88B079CF1BBE}

2011-05-24 07:59 . 2011-05-24 07:59 -------- d-----w- c:\users\Bernard\AppData\Local\{12DAE126-EF27-404D-B890-F4D3E4810B2E}

2011-05-23 18:06 . 2011-05-23 18:06 -------- d-----w- c:\users\Bernard\AppData\Local\{123EEBB2-79E8-4543-B1CA-4BBE372061E1}

2011-05-23 06:06 . 2011-05-23 06:06 -------- d-----w- c:\users\Bernard\AppData\Local\{89938D11-637E-4854-B8BC-8E84EBF9C5CD}

2011-05-22 18:06 . 2011-05-22 18:06 -------- d-----w- c:\users\Bernard\AppData\Local\{83572AFE-CF39-4097-901B-3720F9E02B00}

2011-05-22 06:05 . 2011-05-22 06:05 -------- d-----w- c:\users\Bernard\AppData\Local\{B44CB990-D8DC-48B5-80A4-34518AB1C80B}

2011-05-21 10:39 . 2011-05-21 10:39 -------- d-----w- c:\users\Bernard\AppData\Local\{0034029A-51DF-45C9-AC7A-36F84B4BB3BD}

2011-05-20 16:10 . 2011-05-20 16:10 -------- d-----w- c:\users\Bernard\AppData\Local\{F9BA2BDA-AD3E-45B1-BE9E-3E3A7CB2D252}

2011-05-20 04:09 . 2011-05-20 04:09 -------- d-----w- c:\users\Bernard\AppData\Local\{97B4ED31-F004-4A8F-809A-898D7B0D6E30}

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-06-17 05:29 . 2009-07-05 06:47 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys

2011-06-17 05:29 . 2009-07-05 06:47 111928 ----a-w- c:\windows\system32\PnkBstrB.exe

2011-04-14 20:18 . 2009-04-09 10:09 15880 ----a-w- c:\windows\system32\lsdelete.exe

2011-04-09 16:55 . 2011-04-09 16:55 15453336 ----a-w- c:\windows\system32\xlive.dll

2011-04-09 16:55 . 2011-04-09 16:55 13642904 ----a-w- c:\windows\system32\xlivefnt.dll

2011-04-08 05:14 . 2011-05-27 21:39 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd

2011-04-07 20:45 . 2011-04-07 20:45 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll

2011-04-07 20:45 . 2011-04-07 20:45 66664 ----a-w- c:\windows\system32\nvshext.dll

2011-04-07 20:45 . 2011-04-07 20:45 612456 ----a-w- c:\windows\system32\nvvsvc.exe

2011-04-07 20:45 . 2011-04-07 20:45 111208 ----a-w- c:\windows\system32\nvmctray.dll

2011-04-07 20:44 . 2011-04-07 20:44 3701352 ----a-w- c:\windows\system32\nvcpl.dll

2011-04-07 20:44 . 2011-04-07 20:44 2565224 ----a-w- c:\windows\system32\nvsvc.dll

2011-05-07 19:54 . 2011-05-07 19:54 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{d1a1c8f1-e3d9-48df-802f-20201061ef61}"= "c:\program files\Messenger_Plus_Live_Belgium\tbMess.dll" [2010-11-13 3913000]

.

[HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

2010-11-13 20:58 3913000 ----a-w- c:\program files\Messenger_Plus_Live_Belgium\tbMess.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{d1a1c8f1-e3d9-48df-802f-20201061ef61}"= "c:\program files\Messenger_Plus_Live_Belgium\tbMess.dll" [2010-11-13 3913000]

.

[HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{D1A1C8F1-E3D9-48DF-802F-20201061EF61}"= "c:\program files\Messenger_Plus_Live_Belgium\tbMess.dll" [2010-11-13 3913000]

.

[HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"Steam"="c:\program files\Steam\steam.exe" [2010-11-17 1242448]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]

"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-03-31 399736]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SigmatelSysTrayApp"="sttray.exe" [2008-02-01 405504]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]

.

c:\users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Mediacontrole Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2009-8-26 390432]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-7-11 813584]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WeGame.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WeGame.lnk

backup=c:\windows\pss\WeGame.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^Users^Bernard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Trillian.lnk]

path=c:\users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk

backup=c:\windows\pss\Trillian.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]

2011-04-14 20:18 928496 ----a-w- c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]

2011-05-29 07:11 1047656 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]

2011-05-29 07:11 1047656 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2]

2006-11-29 10:58 90112 ------w- c:\program files\Common Files\Ulead Systems\AutoDetector\Monitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]

2011-03-31 15:38 399736 ----a-w- c:\program files\uTorrent\uTorrent.exe

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]

R3 hitmanpro3;Hitman Pro 3 Support Driver;c:\windows\system32\drivers\hitmanpro3.sys [x]

R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]

R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]

R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]

R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\N360\0308000.029\SYMNDISV.SYS [x]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-09-23 64288]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-04-16 697328]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0403000.005\SYMDS.SYS [2009-10-15 328752]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0403000.005\SYMEFA.SYS [2010-04-22 173104]

S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx86.sys [2011-05-19 810616]

S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0403000.005\ccHPx86.sys [2010-02-26 501888]

S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [2010-08-12 7936]

S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110615.001\IDSvix86.sys [2011-06-10 367736]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0403000.005\Ironx86.SYS [2010-04-29 116784]

S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\N360\0403000.005\SYMTDIV.SYS [2010-05-06 339504]

S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472]

S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-04-14 1378040]

S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256]

S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]

S2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]

S2 N360;Norton 360;c:\program files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]

S2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2007-09-07 1373480]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 105592]

S3 FNETTBOH;FNETTBOH;c:\windows\system32\drivers\FNETTBOH.SYS [2010-08-12 23680]

S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]

S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2010-11-22 15264]

S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\Drivers\LEqdUsb.Sys [2009-06-17 40720]

S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\Drivers\LHidEqd.Sys [2009-06-17 10384]

.

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - FSUSBEXDISK

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

.

Inhoud van de 'Gedeelde Taken' map

.

2011-06-18 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-23 20:18]

.

2011-06-18 c:\windows\Tasks\User_Feed_Synchronization-{8109E461-C96E-45C2-ADF0-BDD309C3BAD7}.job

- c:\windows\system32\msfeedssync.exe [2011-06-17 04:32]

.

.

------- Bijkomende Scan -------

.

IE: Add to Windows &Live Favorites - Welcome to Windows Live

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM

IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM

TCP: DhcpNameServer = 195.130.130.129 195.130.131.129

FF - ProfilePath - c:\users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ewofkeuo.default\

FF - prefs.js: browser.search.defaulturl - hxxp://www15.yoog.com/search.php?q=

FF - prefs.js: browser.search.selectedEngine - Yoog Search

FF - prefs.js: browser.startup.homepage - hxxp://www.nieuwsblad.be

FF - prefs.js: keyword.URL - hxxp://www15.yoog.com/search.php?q=

FF - user.js: browser.search.defaultenginename - Yoog Search

FF - user.js: browser.search.defaulturl - hxxp://www15.yoog.com/search.php?q=

FF - user.js: browser.search.selectedEngine - Yoog Search

FF - user.js: keyword.URL - hxxp://www15.yoog.com/search.php?q=

FF - user.js: keyword.enabled - true

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{5B291E6C-9A74-4034-971B-A4B007A0B315} - (no file)

HKCU-Run-WhatPulse - c:\program files\WhatPulse\WhatPulse.exe

HKLM-Run-NPSStartup - (no file)

HKU-Default-Run-Smartschool Me! - c:\program files\Smartbit bvba\Smartschool Me!\Smartschool Me!.exe

MSConfigStartUp-Hiyo - c:\program files\HiYo\bin\HiYo.exe

MSConfigStartUp-TkBellExe - c:\program files\Common Files\Real\Update_OB\realsched.exe

AddRemove-BattlEye - c:\program files\Bohemia Interactive\ArmA 2 Operation ArrowheadExpansion\BattlEye\UnInstallBE.exe

AddRemove-conduitEngine - c:\progra~1\CONDUI~1\ConduitEngineUninstall.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-06-18 17:31

Windows 6.0.6002 Service Pack 2 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]

"ImagePath"="\"c:\program files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.3.0.5\diMaster.dll\" /prefetch:1"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ee,dc,2b,00,38,6c,8c,4a,82,26,a2,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ee,dc,2b,00,38,6c,8c,4a,82,26,a2,\

.

[HKEY_USERS\S-1-5-21-383614789-628586389-3780648817-1000\Software\SecuROM\License information*]

"datasecu"=hex:da,db,0a,0e,26,5c,28,77,d5,72,01,61,4e,6f,27,65,fb,bc,15,c6,9f,

77,2b,a0,ce,a8,4a,ad,6b,08,ff,84,93,8c,15,40,44,f7,15,88,3e,b3,18,9f,15,24,\

"rkeysecu"=hex:8f,4c,07,ef,22,38,98,82,d2,24,1a,63,38,18,0c,66

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'Explorer.exe'(4460)

c:\program files\Norton 360\Engine\4.3.0.5\ccVrTrst.dll

c:\program files\Norton 360\Engine\4.3.0.5\ccSet.dll

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\NVIDIA Corporation\Display\NvXDSync.exe

c:\windows\system32\nvvsvc.exe

c:\windows\SYSTEM32\WISPTIS.EXE

c:\program files\Common Files\microsoft shared\ink\TabTip.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\windows\SYSTEM32\WISPTIS.EXE

c:\program files\Common Files\microsoft shared\ink\TabTip.exe

c:\program files\Creative\Shared Files\CTDevSrv.exe

c:\windows\system32\spool\DRIVERS\W32X86\3\lxebserv.exe

c:\windows\system32\PnkBstrA.exe

c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\windows\system32\STacSV.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\windows\system32\WTablet\Pen_TabletUser.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\windows\system32\WUDFHost.exe

c:\windows\system32\wbem\unsecapp.exe

c:\windows\system32\DllHost.exe

c:\windows\system32\wbem\unsecapp.exe

.

**************************************************************************

.

Voltooingstijd: 2011-06-18 17:40:16 - machine werd herstart

ComboFix-quarantined-files.txt 2011-06-18 15:39

.

Pre-Run: 112.514.306.048 bytes beschikbaar

Post-Run: 113.106.948.096 bytes beschikbaar

.

- - End Of File - - F9380C43A149770C3B5F69D8FC858AC8

Link naar reactie
Delen op andere sites
  • Reacties 23
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

kape Grootmeester

kape

Geplaatst:
Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\users\Bernard\AppData\Local\{0A1F37E9-FA84-4357-8BAB-4C6F632E3D83}

c:\users\Bernard\AppData\Local\{79DA7609-1A79-4565-8D8F-09A8BBBBCDD9}

c:\users\Bernard\AppData\Local\{1FBC229C-8BDE-4FA0-9A79-4EE4926FD3C7}

c:\users\Bernard\AppData\Local\{15FD1500-DEAB-4A03-8FAF-089358C31C01}

c:\users\Bernard\AppData\Local\{9B598C97-AA91-4C5E-A025-4540388D8CE4}

c:\users\Bernard\AppData\Local\{B758367F-EE86-43A9-90B9-E32B130890BC}

c:\users\Bernard\AppData\Local\{5D4A9C58-A079-4968-80F9-07F7E85F7F4A}

c:\users\Bernard\AppData\Local\{5477B114-3CC5-4D1E-874C-7CCE8E9BE09B}

c:\users\Bernard\AppData\Local\{319F23D7-249B-4697-A310-BE9147F52A3F}

c:\users\Bernard\AppData\Local\{3FFDB0E1-2857-4F3C-9459-4968AFE53F86}

c:\users\Bernard\AppData\Local\{4F5A9195-BA4B-4AD4-B19D-6E061E1B8503}

c:\users\Bernard\AppData\Local\{CFAD6FC1-C0FA-498A-B740-EC051650196D}

c:\users\Bernard\AppData\Local\{70B8A085-1007-48EB-BA0A-124B00768459}

c:\users\Bernard\AppData\Local\{65E97152-8099-4F77-A66A-FCEB80648847}

c:\users\Bernard\AppData\Local\{B2AEAAE7-CDD3-4CB0-8B39-1F7AC6855A78}

c:\users\Bernard\AppData\Local\{3DDF283F-8F2B-4CCC-9849-88832BB8FF07}

c:\users\Bernard\AppData\Local\{F966610B-B83C-4E87-971E-527EE0FDB723}

c:\users\Bernard\AppData\Local\{5A683711-DF73-4CEF-BEE2-06FAB700C751}

c:\users\Bernard\AppData\Local\{728CBA4B-ACED-46D0-A18A-F03E91ED1B06}

c:\users\Bernard\AppData\Local\{637977D4-BD9D-4FA8-A121-BB7115E21A90}

c:\users\Bernard\AppData\Local\{3931201F-EFAB-4187-BFCB-701F66996D64}

c:\users\Bernard\AppData\Local\{337B41DD-9B7F-477F-BB45-8FAE145B7A61}

c:\users\Bernard\AppData\Local\{35D8BEEB-54EC-45E3-8D32-38447D237D98}

c:\users\Bernard\AppData\Local\{36C95C8B-87BD-4570-A11A-3EB6975F9141}

c:\users\Bernard\AppData\Local\{F42FB9E4-EF3E-4012-8D94-D82134FE07C5}

c:\users\Bernard\AppData\Local\{620DB62F-924A-4F6D-A254-CB923F197A57}

c:\users\Bernard\AppData\Local\{6765CC6C-9A9F-4776-AE8F-29636B1F3AF1}

c:\users\Bernard\AppData\Local\{B3423212-DB99-4E9E-BD7F-EC46EB8FBF55}

c:\users\Bernard\AppData\Local\{92D080F9-2E59-4F34-985C-30CDDE0E4FA9}

c:\users\Bernard\AppData\Local\{DBA5C387-D345-4939-BCE1-211D8B2144ED}

c:\users\Bernard\AppData\Local\{F5241C0F-3193-4F54-AE30-4A3D14AD0546}

c:\users\Bernard\AppData\Local\{06EAA5C4-BC5F-4312-8E98-499C34F1529D}

c:\users\Bernard\AppData\Local\{AA184356-C17E-4F9F-8571-D0409F6411D6}

c:\users\Bernard\AppData\Local\{DF2CED84-ED5B-4AAE-A7F5-E5BF0EA35717}

c:\users\Bernard\AppData\Local\{B0C66A5A-01EC-40E0-AC29-9B4580EBD5C1}

c:\users\Bernard\AppData\Local\{E774DC6E-360E-4265-A190-9B2BCEC8A678}

c:\users\Bernard\AppData\Local\{529CBAC1-4CDC-4B51-B168-1D3F9C45BFFC}

c:\users\Bernard\AppData\Local\{F2CCFF4B-ACAD-43D6-BE3F-B254076AB8FE}

c:\users\Bernard\AppData\Local\{CAFD876C-005B-4A4C-A01C-779E5DA8A88F}

c:\users\Bernard\AppData\Local\{A0213929-5762-4071-971E-7735B4BB39EE}

c:\users\Bernard\AppData\Local\{E35586CB-6E58-4E06-9EA2-88B079CF1BBE}

c:\users\Bernard\AppData\Local\{12DAE126-EF27-404D-B890-F4D3E4810B2E}

c:\users\Bernard\AppData\Local\{123EEBB2-79E8-4543-B1CA-4BBE372061E1}

c:\users\Bernard\AppData\Local\{89938D11-637E-4854-B8BC-8E84EBF9C5CD}

c:\users\Bernard\AppData\Local\{83572AFE-CF39-4097-901B-3720F9E02B00}

c:\users\Bernard\AppData\Local\{B44CB990-D8DC-48B5-80A4-34518AB1C80B}

c:\users\Bernard\AppData\Local\{0034029A-51DF-45C9-AC7A-36F84B4BB3BD}

c:\users\Bernard\AppData\Local\{F9BA2BDA-AD3E-45B1-BE9E-3E3A7CB2D252}

c:\users\Bernard\AppData\Local\{97B4ED31-F004-4A8F-809A-898D7B0D6E30}

Registry::

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

[-HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

[-HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

[-HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

Firefox::

FF - ProfilePath - c:\users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ewofkeuo.default\

FF - prefs.js: browser.search.defaulturl -

FF - prefs.js: browser.search.selectedEngine -

FF - prefs.js: keyword.URL -

FF - user.js: browser.search.defaultenginename -

FF - user.js: browser.search.defaulturl -

FF - user.js: browser.search.selectedEngine -

FF - user.js: keyword.URL -

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht samen met een nieuw logje van HijackThis.

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:
wat bedoel je eigelijk met " inhoud van de Combofix.txt" ?
De inhoud van Combofix.txt is het nieuwe logje dat je hebt gemaakt met het scriptje dat ik je eerder heb laten aanmaken en in de snelkoppeling van Combofix heb laten slepen (zie bericht 12).
Link naar reactie
Delen op andere sites
Lipton Meewerkend lid

Lipton

Geplaatst:
  • Auteur
Geplaatst:

ComboFix 11-06-17.04 - Bernard 19/06/2011 8:32.3.4 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3322.1640 [GMT 2:00]

Gestart vanuit: c:\users\Bernard\Downloads\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Bernard\Desktop\CFScript.txt

AV: Lavasoft Ad-Watch Live! Antivirus *Disabled/Updated* {DAAC1C79-1A96-9DFE-FC4C-6940214C33E6}

AV: Norton 360 *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

FW: Norton 360 *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}

SP: Norton 360 *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Bernard\AppData\Local\{0034029A-51DF-45C9-AC7A-36F84B4BB3BD}

c:\users\Bernard\AppData\Local\{06EAA5C4-BC5F-4312-8E98-499C34F1529D}

c:\users\Bernard\AppData\Local\{0A1F37E9-FA84-4357-8BAB-4C6F632E3D83}

c:\users\Bernard\AppData\Local\{123EEBB2-79E8-4543-B1CA-4BBE372061E1}

c:\users\Bernard\AppData\Local\{12DAE126-EF27-404D-B890-F4D3E4810B2E}

c:\users\Bernard\AppData\Local\{15FD1500-DEAB-4A03-8FAF-089358C31C01}

c:\users\Bernard\AppData\Local\{1FBC229C-8BDE-4FA0-9A79-4EE4926FD3C7}

c:\users\Bernard\AppData\Local\{319F23D7-249B-4697-A310-BE9147F52A3F}

c:\users\Bernard\AppData\Local\{337B41DD-9B7F-477F-BB45-8FAE145B7A61}

c:\users\Bernard\AppData\Local\{35D8BEEB-54EC-45E3-8D32-38447D237D98}

c:\users\Bernard\AppData\Local\{36C95C8B-87BD-4570-A11A-3EB6975F9141}

c:\users\Bernard\AppData\Local\{3931201F-EFAB-4187-BFCB-701F66996D64}

c:\users\Bernard\AppData\Local\{3DDF283F-8F2B-4CCC-9849-88832BB8FF07}

c:\users\Bernard\AppData\Local\{3FFDB0E1-2857-4F3C-9459-4968AFE53F86}

c:\users\Bernard\AppData\Local\{4F5A9195-BA4B-4AD4-B19D-6E061E1B8503}

c:\users\Bernard\AppData\Local\{529CBAC1-4CDC-4B51-B168-1D3F9C45BFFC}

c:\users\Bernard\AppData\Local\{5477B114-3CC5-4D1E-874C-7CCE8E9BE09B}

c:\users\Bernard\AppData\Local\{5A683711-DF73-4CEF-BEE2-06FAB700C751}

c:\users\Bernard\AppData\Local\{5D4A9C58-A079-4968-80F9-07F7E85F7F4A}

c:\users\Bernard\AppData\Local\{620DB62F-924A-4F6D-A254-CB923F197A57}

c:\users\Bernard\AppData\Local\{637977D4-BD9D-4FA8-A121-BB7115E21A90}

c:\users\Bernard\AppData\Local\{65E97152-8099-4F77-A66A-FCEB80648847}

c:\users\Bernard\AppData\Local\{6765CC6C-9A9F-4776-AE8F-29636B1F3AF1}

c:\users\Bernard\AppData\Local\{70B8A085-1007-48EB-BA0A-124B00768459}

c:\users\Bernard\AppData\Local\{728CBA4B-ACED-46D0-A18A-F03E91ED1B06}

c:\users\Bernard\AppData\Local\{79DA7609-1A79-4565-8D8F-09A8BBBBCDD9}

c:\users\Bernard\AppData\Local\{83572AFE-CF39-4097-901B-3720F9E02B00}

c:\users\Bernard\AppData\Local\{89938D11-637E-4854-B8BC-8E84EBF9C5CD}

c:\users\Bernard\AppData\Local\{92D080F9-2E59-4F34-985C-30CDDE0E4FA9}

c:\users\Bernard\AppData\Local\{97B4ED31-F004-4A8F-809A-898D7B0D6E30}

c:\users\Bernard\AppData\Local\{9B598C97-AA91-4C5E-A025-4540388D8CE4}

c:\users\Bernard\AppData\Local\{A0213929-5762-4071-971E-7735B4BB39EE}

c:\users\Bernard\AppData\Local\{AA184356-C17E-4F9F-8571-D0409F6411D6}

c:\users\Bernard\AppData\Local\{B0C66A5A-01EC-40E0-AC29-9B4580EBD5C1}

c:\users\Bernard\AppData\Local\{B2AEAAE7-CDD3-4CB0-8B39-1F7AC6855A78}

c:\users\Bernard\AppData\Local\{B3423212-DB99-4E9E-BD7F-EC46EB8FBF55}

c:\users\Bernard\AppData\Local\{B44CB990-D8DC-48B5-80A4-34518AB1C80B}

c:\users\Bernard\AppData\Local\{B758367F-EE86-43A9-90B9-E32B130890BC}

c:\users\Bernard\AppData\Local\{CAFD876C-005B-4A4C-A01C-779E5DA8A88F}

c:\users\Bernard\AppData\Local\{CFAD6FC1-C0FA-498A-B740-EC051650196D}

c:\users\Bernard\AppData\Local\{DBA5C387-D345-4939-BCE1-211D8B2144ED}

c:\users\Bernard\AppData\Local\{DF2CED84-ED5B-4AAE-A7F5-E5BF0EA35717}

c:\users\Bernard\AppData\Local\{E35586CB-6E58-4E06-9EA2-88B079CF1BBE}

c:\users\Bernard\AppData\Local\{E774DC6E-360E-4265-A190-9B2BCEC8A678}

c:\users\Bernard\AppData\Local\{F2CCFF4B-ACAD-43D6-BE3F-B254076AB8FE}

c:\users\Bernard\AppData\Local\{F42FB9E4-EF3E-4012-8D94-D82134FE07C5}

c:\users\Bernard\AppData\Local\{F5241C0F-3193-4F54-AE30-4A3D14AD0546}

c:\users\Bernard\AppData\Local\{F966610B-B83C-4E87-971E-527EE0FDB723}

c:\users\Bernard\AppData\Local\{F9BA2BDA-AD3E-45B1-BE9E-3E3A7CB2D252}

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-05-19 to 2011-06-19 ))))))))))))))))))))))))))))))

.

.

2011-06-19 06:40 . 2011-06-19 06:40 -------- d-----w- c:\users\Gast\AppData\Local\temp

2011-06-19 06:40 . 2011-06-19 06:40 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-06-19 06:20 . 2011-06-19 06:20 -------- d-----w- c:\users\Bernard\AppData\Local\{D1AC7A6D-9A28-4AA5-96B1-CAEBF815C261}

2011-06-18 17:56 . 2011-06-18 17:56 -------- d-----w- c:\users\Bernard\AppData\Local\{EB66C09B-34F0-4468-BE74-0B2992B8A6E1}

2011-06-18 15:40 . 2011-06-19 06:41 -------- d-----w- c:\users\Bernard\AppData\Local\temp

2011-06-17 22:10 . 2011-06-17 22:10 -------- d-----w- c:\program files\CCleaner

2011-06-17 06:38 . 2011-06-17 06:38 388096 ----a-r- c:\users\Bernard\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-06-17 06:38 . 2011-06-17 06:38 -------- d-----w- c:\program files\Trend Micro

2011-06-09 13:47 . 2011-06-09 13:50 -------- d-----w- c:\programdata\PopCap Games

2011-06-04 17:59 . 2011-06-04 17:59 -------- d-----w- c:\program files\Virtual Villagers 4 - The Tree of Life

2011-06-04 17:51 . 2011-06-04 17:53 -------- d-----w- c:\programdata\Big Fish Games

2011-06-04 17:49 . 2011-06-04 17:49 -------- d-----w- c:\users\Bernard\AppData\Local\{130705C3-5891-4B70-B53F-6B6F19778B60}

2011-06-04 17:49 . 2011-06-04 17:53 -------- d-----w- C:\BigFishGamesCache

2011-05-27 21:43 . 2011-05-27 21:43 -------- d-----w- c:\users\UpdatusUser

2011-05-27 21:41 . 2011-05-27 21:41 -------- d-----w- c:\programdata\NVIDIA Corporation

2011-05-27 21:39 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll

2011-05-27 21:39 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll

2011-05-27 21:39 . 2011-04-08 05:14 6299752 ----a-w- c:\windows\system32\nvwgf2um.dll

2011-05-27 21:39 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll

2011-05-27 21:39 . 2011-04-08 05:14 15227496 ----a-w- c:\windows\system32\nvoglv32.dll

2011-05-27 21:39 . 2011-04-08 05:14 10690024 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2011-05-27 21:39 . 2011-04-08 05:14 5180824 ----a-w- c:\windows\system32\nvcuda.dll

2011-05-27 21:39 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll

2011-05-27 21:39 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll

2011-05-27 21:39 . 2011-04-08 05:14 2034280 ----a-w- c:\windows\system32\nvapi.dll

2011-05-27 21:39 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll

2011-05-27 21:39 . 2011-04-08 05:14 10071656 ----a-w- c:\windows\system32\nvd3dum.dll

2011-05-27 21:33 . 2008-10-07 12:33 797216 ----a-w- c:\windows\system32\nvcplui.exe

2011-05-27 21:33 . 2008-10-07 12:33 420384 ----a-w- c:\windows\system32\nvcpl.cpl

2011-05-27 14:26 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-05-27 14:26 . 2011-06-17 15:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2011-05-27 14:26 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-06-17 05:29 . 2009-07-05 06:47 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys

2011-06-17 05:29 . 2009-07-05 06:47 111928 ----a-w- c:\windows\system32\PnkBstrB.exe

2011-04-14 20:18 . 2009-04-09 10:09 15880 ----a-w- c:\windows\system32\lsdelete.exe

2011-04-09 16:55 . 2011-04-09 16:55 15453336 ----a-w- c:\windows\system32\xlive.dll

2011-04-09 16:55 . 2011-04-09 16:55 13642904 ----a-w- c:\windows\system32\xlivefnt.dll

2011-04-08 05:14 . 2011-05-27 21:39 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd

2011-04-07 20:45 . 2011-04-07 20:45 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll

2011-04-07 20:45 . 2011-04-07 20:45 66664 ----a-w- c:\windows\system32\nvshext.dll

2011-04-07 20:45 . 2011-04-07 20:45 612456 ----a-w- c:\windows\system32\nvvsvc.exe

2011-04-07 20:45 . 2011-04-07 20:45 111208 ----a-w- c:\windows\system32\nvmctray.dll

2011-04-07 20:44 . 2011-04-07 20:44 3701352 ----a-w- c:\windows\system32\nvcpl.dll

2011-04-07 20:44 . 2011-04-07 20:44 2565224 ----a-w- c:\windows\system32\nvsvc.dll

2011-05-07 19:54 . 2011-05-07 19:54 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"Steam"="c:\program files\Steam\steam.exe" [2010-11-17 1242448]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]

"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-03-31 399736]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SigmatelSysTrayApp"="sttray.exe" [2008-02-01 405504]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]

.

c:\users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Mediacontrole Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2009-8-26 390432]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-7-11 813584]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WeGame.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WeGame.lnk

backup=c:\windows\pss\WeGame.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^Users^Bernard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Trillian.lnk]

path=c:\users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk

backup=c:\windows\pss\Trillian.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]

2011-04-14 20:18 928496 ----a-w- c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]

2011-05-29 07:11 1047656 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]

2011-05-29 07:11 1047656 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2]

2006-11-29 10:58 90112 ------w- c:\program files\Common Files\Ulead Systems\AutoDetector\Monitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]

2011-03-31 15:38 399736 ----a-w- c:\program files\uTorrent\uTorrent.exe

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-04-14 1378040]

R3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]

R3 hitmanpro3;Hitman Pro 3 Support Driver;c:\windows\system32\drivers\hitmanpro3.sys [x]

R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2010-11-22 15264]

R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\Drivers\LEqdUsb.Sys [2009-06-17 40720]

R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\Drivers\LHidEqd.Sys [2009-06-17 10384]

R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]

R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]

R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]

R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\N360\0308000.029\SYMNDISV.SYS [x]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-09-23 64288]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-04-16 697328]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0403000.005\SYMDS.SYS [2009-10-15 328752]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0403000.005\SYMEFA.SYS [2010-04-22 173104]

S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx86.sys [2011-05-19 810616]

S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0403000.005\ccHPx86.sys [2010-02-26 501888]

S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [2010-08-12 7936]

S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110615.001\IDSvix86.sys [2011-06-10 367736]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0403000.005\Ironx86.SYS [2010-04-29 116784]

S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\N360\0403000.005\SYMTDIV.SYS [2010-05-06 339504]

S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472]

S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256]

S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]

S2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]

S2 N360;Norton 360;c:\program files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]

S2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2007-09-07 1373480]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 105592]

S3 FNETTBOH;FNETTBOH;c:\windows\system32\drivers\FNETTBOH.SYS [2010-08-12 23680]

S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

.

Inhoud van de 'Gedeelde Taken' map

.

2011-06-19 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-23 20:18]

.

2011-06-19 c:\windows\Tasks\User_Feed_Synchronization-{8109E461-C96E-45C2-ADF0-BDD309C3BAD7}.job

- c:\windows\system32\msfeedssync.exe [2011-06-17 04:32]

.

.

------- Bijkomende Scan -------

.

IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM

IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM

TCP: DhcpNameServer = 195.130.130.129 195.130.131.129

FF - ProfilePath - c:\users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ewofkeuo.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.nieuwsblad.be

FF - user.js: keyword.enabled - true

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-06-19 08:41

Windows 6.0.6002 Service Pack 2 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]

"ImagePath"="\"c:\program files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\4.3.0.5\diMaster.dll\" /prefetch:1"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ee,dc,2b,00,38,6c,8c,4a,82,26,a2,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ee,dc,2b,00,38,6c,8c,4a,82,26,a2,\

.

[HKEY_USERS\S-1-5-21-383614789-628586389-3780648817-1000\Software\SecuROM\License information*]

"datasecu"=hex:da,db,0a,0e,26,5c,28,77,d5,72,01,61,4e,6f,27,65,fb,bc,15,c6,9f,

77,2b,a0,ce,a8,4a,ad,6b,08,ff,84,93,8c,15,40,44,f7,15,88,3e,b3,18,9f,15,24,\

"rkeysecu"=hex:8f,4c,07,ef,22,38,98,82,d2,24,1a,63,38,18,0c,66

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'Explorer.exe'(2616)

c:\program files\Logitech\SetPoint\GameHook.dll

c:\program files\Logitech\SetPoint\lgscroll.dll

c:\windows\system32\authui.dll

c:\windows\system32\PortableDeviceApi.dll

c:\windows\system32\bthprops.cpl

.

Voltooingstijd: 2011-06-19 08:44:07

ComboFix-quarantined-files.txt 2011-06-19 06:44

ComboFix2.txt 2011-06-18 15:40

.

Pre-Run: 112.062.316.544 bytes beschikbaar

Post-Run: 112.060.104.704 bytes beschikbaar

.

- - End Of File - - C66060CDF67198648D0C7E2A2DAF5996

---------- Post toegevoegd om 08:58 ---------- Vorige post was om 08:58 ----------

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:54:29, on 19/06/2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.19088)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\sttray.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Windows\WindowsMobile\wmdSync.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Steam\Steam.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

C:\Windows\system32\WTablet\Pen_TabletUser.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\Explorer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\Internet Explorer\IELowutil.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

O2 - BHO: Lexmark Werkbalk - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.3.0.5\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.3.0.5\IPSBHO.DLL

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll

O4 - HKLM\..\Run: [sigmatelSysTrayApp] sttray.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\steam.exe" -silent

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - Startup: Mediacontrole Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM

O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM

O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/nl/uno1/GAME_UNO1.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe

O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe

O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe

O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe

O23 - Service: lxebCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe

O23 - Service: lxeb_device - - C:\Windows\system32\lxebcoms.exe

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe

--

End of file - 9071 bytes

---------- Post toegevoegd om 08:59 ---------- Vorige post was om 08:58 ----------

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:54:29, on 19/06/2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.19088)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\sttray.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Windows\WindowsMobile\wmdSync.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Steam\Steam.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

C:\Windows\system32\WTablet\Pen_TabletUser.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\Explorer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\Internet Explorer\IELowutil.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Lexmark Werkbalk - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.3.0.5\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.3.0.5\IPSBHO.DLL

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll

O4 - HKLM\..\Run: [sigmatelSysTrayApp] sttray.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\steam.exe" -silent

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - Startup: Mediacontrole Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM

O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM

O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/nl/uno1/GAME_UNO1.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe

O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe

O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe

O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe

O23 - Service: lxebCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe

O23 - Service: lxeb_device - - C:\Windows\system32\lxebcoms.exe

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe

--

End of file - 9071 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Dit ziet er (bijna) goed uit. Deze mappen mag je nog verwijderen :

c:\users\Bernard\AppData\Local\{D1AC7A6D-9A28-4AA5-96B1-CAEBF815C261}

c:\users\Bernard\AppData\Local\{EB66C09B-34F0-4468-BE74-0B2992B8A6E1}

... en laat dan eens weten hoe het nu met crashes, e.d. staat ?

Link naar reactie
Delen op andere sites
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.